moritz
/
infrapuzzle
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updating to cert-manager 1.0

This commit is contained in:
Moritz Graf 2020-09-12 12:36:17 +02:00
parent 7d9e0e9d94
commit 338d312eda
4 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
k8s/README.md
View File

@ -59,18 +59,16 @@ helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx -n ingress-ngin
## [cert-manager](https://cert-manager.io/docs/tutorials/acme/ingress/)
Apply with helm:
Apply with helm. [See chart.](https://github.com/jetstack/cert-manager):
```bash
kubectl create ns cert-manager
helm repo add jetstack https://charts.jetstack.io
helm repo update
helm upgrade --install cert-manager jetstack/cert-manager -n cert-manager -f cert-manager/cert-manager.yaml
# probably not even needed:
$ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/master/deploy/manifests/00-crds.yaml
# this is required:
$ kubectl apply -f cert-manager/staging-issuer.yaml
$ kubectl apply -f cert-manager/production-issuer.yaml
kubectl apply -f cert-manager/staging-issuer.yaml
kubectl apply -f cert-manager/production-issuer.yaml
```
To test all this you may use the kuaard demo project:
@ -192,8 +190,13 @@ kubectl apply -f tt-rss/
## monitoring
The prometheus-operator, now called [kube-prometheus-stack](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack) is used.
```sh
helm upgrade --install prometheus-operator stable/prometheus-operator -n monitoring -f monitoring/prometheus-operator.secret.yml
kubectl create ns monitoring
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
helm upgrade --install prometheus-operator prometheus-community/kube-prometheus-stack -n monitoring -f monitoring/prometheus-operator.secret.yml
```
## gitea

1
k8s/cert-manager/cert-manager.yaml
View File

@ -7,3 +7,4 @@ podLabels:
app: cert-manager
prometheus:
enabled: false
installCRDs: true

2
k8s/cert-manager/production-issuer.yaml
View File

@ -1,6 +1,6 @@
# status: implemented
apiVersion: cert-manager.io/v1alpha2
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod

2
k8s/cert-manager/staging-issuer.yaml
View File

@ -1,6 +1,6 @@
# status: implemented
apiVersion: cert-manager.io/v1alpha2
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging